This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File:                     DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier:          e6y8l8szPiCrU3fcvUcVFiYrQjcoOJ4567AxWDuewpA=
Subject key identifier:   97:F2:45:16:4F:B4:77:99:17:99:26:19:82:C4:37:84:09:2B:56:4F
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer:       /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial:       019C42EB2C856BBCA4E5062E8042B6126A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number:          1818
Signing time:             Mon 09 Feb 2026 15:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:34 +0000
Files and hashes:         1: 1_3QPj2kcZJlDlUR0wUaWH0hnN4.roa (hash: HjpmYaddiFadOHWD4a1Uq/l0fBMZhg54vPDiEU9FmAo=)
                          2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: fZ+ldGI7UvvzWet1DhnAauMlH0YyjCqv/sUU8sYY65E=)
                          3: b3BYq2GWfMwJHoWmAuIkoqzVBVA.roa (hash: XNgIXKY6d3KMvTnZqnzkIrqeWkBBwAFD3F11zTkNoG4=)
                          4: dOBeP6c511bhyxhKOl1QYRWaxPM.roa (hash: TATVX7qCBXnkq+JZzCH4bdJ1Q/CylPyqx/nVOxJrUII=)
                          5: wFT-gzmhRqgVywX_alBqSQGShuo.roa (hash: gX1S45YD4ooSsAhPDzvbDfjjDz84SBGIWiAajTxl5cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:2c:85:6b:bc:a4:e5:06:2e:80:42:b6:12:6a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
        Validity
            Not Before: Feb  9 15:00:34 2026 GMT
            Not After : Feb 10 15:00:34 2026 GMT
        Subject: CN=97f245164fb477991799261982c43784092b564f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:47:e4:55:ce:1d:66:d6:41:f3:55:c8:2d:
                    09:bc:07:48:18:1e:4c:4c:39:62:c0:95:0f:b0:d0:
                    07:aa:06:46:e4:e3:c8:48:f8:e2:86:aa:81:de:02:
                    74:97:45:0f:2b:93:d7:c7:00:bc:98:24:57:d9:2a:
                    20:31:61:f4:f6:a9:2a:c0:ac:40:96:b0:98:91:78:
                    22:42:7d:ed:b2:12:9f:23:3b:af:80:ea:1d:e4:e4:
                    05:85:ee:17:1c:75:cd:21:15:fc:75:34:d4:cc:e2:
                    69:92:0d:0a:ca:16:f7:ea:a0:7b:19:c1:24:af:c8:
                    bc:3d:8c:32:78:23:76:ad:3d:ea:76:c9:00:d6:87:
                    e8:5c:ab:ff:8e:a4:a5:84:61:d6:17:da:5f:1e:54:
                    08:c7:52:55:ac:f5:c6:14:6f:38:ce:5c:37:86:c3:
                    38:1b:91:02:6f:64:70:dd:90:1d:a1:3c:92:f1:56:
                    74:33:9d:0c:18:97:da:c8:4e:15:b0:c3:08:0d:9c:
                    d6:9b:92:ad:ce:08:d9:eb:cd:f1:49:20:a5:a9:a2:
                    24:09:dd:22:f1:f8:dd:da:a4:59:e5:77:d9:7d:5f:
                    9c:2f:a1:fe:77:c9:3a:ac:13:3c:2d:bf:22:a0:e3:
                    bc:25:9e:66:3b:70:78:e7:69:3e:11:c9:d6:b9:e4:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F2:45:16:4F:B4:77:99:17:99:26:19:82:C4:37:84:09:2B:56:4F
            X509v3 Authority Key Identifier:
                keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3c:f6:f7:30:bc:5a:5c:d0:b1:3c:dd:5d:3b:fb:63:d4:e7:
         3e:1e:9d:91:ae:cf:2f:d5:c5:a6:0b:d4:0c:e6:1c:b0:cc:a0:
         24:51:ee:62:b2:87:58:d5:9b:f5:54:74:08:43:ed:9b:e6:ea:
         b8:7d:94:83:02:c9:4a:67:89:a8:09:62:b7:e1:49:cf:14:03:
         a0:14:af:51:9f:4d:50:43:0f:f8:95:00:50:89:90:f6:df:88:
         c4:ee:03:1d:ef:1f:04:27:8a:2e:fc:20:3c:19:ec:36:72:c3:
         f8:11:a7:c0:3a:e9:6e:bf:17:23:8e:a0:be:f6:52:69:49:d4:
         cc:77:d1:6b:51:69:a9:12:4b:6a:e6:dd:23:21:e7:20:54:22:
         c8:b9:31:f4:e4:71:d4:21:51:9b:31:af:ef:56:e2:34:bf:b3:
         b4:c6:a7:ce:bb:97:d8:dc:cd:7c:f8:e6:db:1b:6c:73:f7:72:
         16:c0:9c:2a:d8:6d:64:c9:4e:81:f8:8b:19:5e:9f:97:76:75:
         6f:36:85:f7:1b:76:36:01:dc:77:9a:ee:08:f1:4d:12:c8:cc:
         04:9f:67:1c:21:a5:f2:04:17:37:b5:80:ba:58:d9:d1:0c:9c:
         43:ce:fe:d0:1a:10:4f:0b:89:23:ce:92:81:e0:38:e8:24:8f:
         5b:fd:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:15 2026 by rpki-client